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These notes are modified from previous versions (due to Neil Dummigan, 
Alan Lauder and Roger Heath-Brown) and have been recently revised by 
me. They draw mainly upon "A Classical Introduction to Modern Num- 
ber Theory", by Ireland and Rosen, and "Algebraic Number Theory", by 
Stewart and Tall. While I take full responsibility for their current contents, 
considerable thanks are clearly due to Neil, Alan and Roger. 

I will be pleased to hear of any misprints ar errors! 
Email me at f lynnOmaths . ox . ac . uk. 

Throughout these notes we use the abbreviation NE for "not examinable 
in this course" . 

Lectures will omit some of the non-examinable proofs, and some of the 
examples in Section 9. However these should prove helpful for examination 
revision. 

Useful texts 

Algebraic Number Theory and Fermat's Last Theorem, I. Stewart and D. 
Tall, Third Edition. We shall frequently cite this as "S&T" . 

Older editions under the name "Algebraic Number Theory" will also suf- 
fice. 

Other useful but more advanced references: 
A Classical Introduction to Modern Number Theory, (Chapter 12) K. Ireland 
and M. Rosen 

Algebraic Number Theory, A. Frohlich and M.J. Taylor 

A Course in Computational Algebraic Number Theory, H. Cohen. 
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1 Introduction 



1 . 1 Motivation 

Consider "Fermat's Last Theorem" which asserts that x"' + y'^ = has no 
solution x^y^z G Z {x,y,z all nonzero) if n G N, n ^ 3. It is sufficient to 
prove this for n = 4 and n = p ^ 3 prime [since any n ^ 3 is divisible by 4 
or some prime p ^ 3; if n = 4A;, then any solution to + 1/" ~ z^ would give 
{x^Y + {y^Y — i^^Y'^ similarly if n = pk, then any solution to + y" = z^ 
would give {x^Y + {y^Y = {z'^Y]- 

Format himself proved the result for n = A after which it remained to 
prove it for n = p ^ 3 prime. Let = exp(27ri/p) G C and let K := Q{Cp). 
Factoring the left hand side in Z[(p] we see that 

{x + y){x + CpV) ...{x + Cr^y) = zK 

Now in Z it is true that \i a^. . .a^ — If and the a, have no common factors, 
then each is an p-th power, by the unique factorisation property of Z. To 
make progress on Fermat's Last Theorem it would be useful to know whether 
an analogous result holds true in Z[(^p]. More generally we might ask what 
sort of number theory can we do in a ring such as Z[(^p]? In particular do we 
still have an analogue of unique factorisation into primes? 
These are the questions addressed in this course. 

1.2 Background material 

We need to know the statements (but not proof) of various pre-requisites 
for this course. Firstly we have, some results from "Polynomial Rings and 
Galois Theory". 

Lemma 1.1 (Gauss's Lemma). Letp{t) G Z[t\ be irreducible in Z[t]; then it 
is also irreducible in Q[t]. 

Proof. NE. See S&T, page 18, Lemma 1.7. The broad strategy is to imagine 
p{t) were reducible over Q, with p(t) = g{t)h{t) where g{i), h(t) G Q[t], and 
then show there exists A G Q, A 7^ 0, such that Xg, \~^h G Z[t] (the existence 
of such A is sometimes included in the statement of Gauss' Lemma). □ 

Theorem 1.2 (Eisenstein). Let f{t) = oq + oit H h On^" ^ Z[t]. Suppose 

there exists a prime p such that p does not divide an, but p divides ai for 
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i = 0, . . . ,n — 1, and does not divide qq. Then, apart from constant 
factors, f{t) is irreducible over and hence irreducible over Q. 

Such a polynomial is said to be Eisenstein with respect to the prime p. 
Note also: irreducible over K is just another way of saying: irreducible in 
K[t\. 

Proof NE. See S&T, page 19, Theorem 1.8. □ 

Definition 1.3. A number field (or algebraic number field^ is a finite ex- 
tension K of Q. The index [K : Q] is the degree of the number field. 

Theorem 1.4. If K is a number field then K = Q{9) for some (algebraic) 
number 9 E K . 

Proof NE. See S&T, page 32, Theorem 2.2. □ 

Theorem 1.5. Let K — Q{9) be a number field of degree n over Q. Then 
there are exactly n distinct monomorphisms (embeddings) 

ai : K ^ C {i = 1, . . . ,n). 

The elements (Ti{9) are the distinct zeros in C of the minimal polynomial me 
of 9 over Q. 

If ai{K) C R then Ui is called a real embedding, and otherwise it is called 
a complex embedding. 

Recall that a monomorphism is a one-to-one map satisfying a{cx-\- (3) — 

aipt) + (t(/3) and a{a(i) = a{a)cr{f3). 

Proof NE. See S&T, page 38, Theorem 2.4. □ 

We now have some elementary results on free abelian groups. We shall 
express such groups with the operation written additively. 

Definition 1.6. A square matrix over Z is unimodular if it has determinant 
±1. 

Note that A is unimodular if and only if A~^ has coefficients in Z. 



3 



Lemma 1.7. Let G be a free abelian group of rank n with Z-basis {xi, . . . , 
Suppose {uij) is an n X n matrix with integer entries. Let 

3 

Then the elements {yi, . . . , y„} form a "L-basis for G if and only if (uij) is 
unimodular. 

Proof NE. See S&T, page 28, Lemma 1.15. □ 

Theorem 1.8. Let G be a free abelian group of rank n, and H a subgroup. 
Then G/H is finite if and only if H has rank n. Moreover, if G and H have 
X-bases xi, . . . ,Xn and yi, . . . , y„ with yi — ciijXj we have 

|det(a,,-)|. 

Proof. NE. See S&T, page 30, Theorem 1.17. □ 

2 Discriminants, Norms and Traces 

Definition 2.1. Let K/Q be an algebraic number field of degree n, and let 
a E K. Let ai : K ^ C be the n embeddings, i = 1, . . . ,n. The ai{a) are 
called the f^T-jconjugates of a. Define i/ie trace Trj^/Q(«) = Y17=i'^ii^) '^'^^ 
norm Norm;^/Q(a) = Nj^/Q{a) = N{a) = HiLi^il")- When K = Q{a) 
these are called the absolute conjugates, trace and norm. 

For any K = Q(/3), suppose that /3 has minimal polynomial m^(X). If 
Pi, . . . , are the n roots of m^j in C then one can choose the embeddings so 
that ai : /3 /3i. 

We record the trivial properties :- 

Norm^/Q(75) = Norm^/Q(7)Norm;^/Q(5); 

Norm^/Q(7) = if and only if 7 = 0; 

Norm^/Q(g) = for q E Q. 

li K = Q{a) and ma{X) = X"" + c„„iX"-i + h Cq, then we have 

Trx/Q(a) = —Cn-i and Norm^yQ(Q;) = (— l)"co. In particular the norm and 
trace are in Q. 

More generally, for any K — Q(/3), q EK, the norm and trace of a are 
symmetric functions of the conjugates (Ti{a), and are therefore in Q. 
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Definition 2.2. Let w — {wi, . . . , Wn} be an n-tuple of elements of K, where 

• The determinant is /S.{w) :— det{ai{wj)), i.e., the determinant of the 
n X n matrix whose {i,j)th entry is ai{wj). 

• The discriminant ofw is A(w)^. [sometimes also written as A'^{w).] 

• Warning*: S&T and some other books use A where we write (!). 
Lemma 2.3. We have A{wy — det{Trf^/Q{wiWj)), and so A{wy e Q. 
Proof. Let A = {ai{wj)). Then 

A(w)2 = det(A)2 = det{A^A) = det (^^ak{wi)ak{wj)j 
= det ^y^^ak{wiWj)j ^ det{TrK/q{wiWj)). 



Lemma 2.4. Ifv — {vi, . . . , v„} is a basis for K/Q andw — {wi, 
K, with Wi — CijVj and Cij e then 

A(w) = det(C)A(v) where C = (qj). 

Proof. Left as exercise. 

Lemma 2.5. If K = Q{a) and v = {1, a, . . . , a""^} then 

i<j 

Here cki, . . . , are the conjugates of a. 
Proof. We have 



□ 



□ 



A(^) 



, n—1 



1Z Tl- 
CKi ai ... ai 

1 a2 al ... a2~^ 



1 Qijj Qijj 



n-l 
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(This is a so-called van der Monde determinant.) We can view this as a 
polynomial of degree n{n — l)/2 in «i, . . . ,«„. Since it vanishes when we 
set ai = Uj the polynomial is divisible by ctj — aj for all i < j. There 
are n{n — l)/2 of these factors. Hence, on checking that the coefficient of 
a2al . . . OL^^ is +1 we deduce that 

A(w) = - Qij). 

□ 

Corollary 2.6. t^{w\ . . . , Wn) if and only if wi . . . ,Wn is a basis for 
K/Q. 

Proof. Suppose K = Q{a) and v = {1, a, ... , a"'~^} are as in the previous 
lemma. Since the ctj are distinct, A(i>) 7^ 0. By Lemma 2.4, A{w) ^ 
for any other basis w of -fC/Q. If w is not a basis then det(C) = and so 
A(w) - 0. □ 

3 The Ring of Integers 

Definition 3.1. We say that a & K is an algebraic integer if and only if 
there exists a monic g{x) e Z[x] such that g{a) — 0. Define Ok as the set 
of all algebraic integers in K. 

We shall see that the set Ok will bear the same relation to K as Z does 
to Q. 

Note 3.2 

1. Suppose a & K. Then a G Ok if and only if the minimal polynomial 

ma{x) is in Z[a;], by Gauss's lemma. 

2. Suppose a & K and a!^ + ad-ia."^"^ + • • • + ao = 0, e Q. If n e Z 
then 

{naY + nad^iinaY'^ H h n'^ao = 0. 

Choosing n to clear the denominators of all the we can get na e Ok- 

3. The mininum polynomial of r G Q is 2; — r which is in Z[x] if and only 
if r e Z. Hence if = Q then Ok = Z. Generally, ZCOk- 
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Example 3.3 Let K — Q(-\/d), where d e d ^ ±1, with d squarefree 
(i.e. there is no prime p for which p^ld). Then [K : Q] = 2, and K has a 
O- basis {l,Vd}. If a,6 e Q then a = a + by/d e K. Since o"i(«) = a + 
and (72 (a) = a — we have Trj^/Q(Q;) = 2a and Norm;^/Q(a) = — dlP'. 
Moreover ma{x) — — 2ax + {a? — dlP') (if 6 7^ 0). Hence a e Ok if and 
only if 2a, a^ - dft^ g ^ 

Suppose a G Ok- Then (2a)2 - rf(26)2 e Z, giving rf(26)2 e Z. Writing 
26 = -u/f (m, f G Z) we have du^v'"^ G Z, so that f Since ci is squarefree 

this implies v\u, giving 26 G Z. Write 2a = A, 26 = 5, with A, 5 G Z. 
Then a^ — db'^ G Z, so that = dB"^ mod 4. Now observe that any square 
is congruent to or 1 modulo 4. 

• Case 1: Suppose d = 2 or 3 mod 4. Then we must have A, B even, and 
a, 6 G Z. 

• Case 2: Suppose that d = 1 mod 4. This implies that A = B mod 2, 
so a, 6 are both in Z or both in Z + |. 

Of course we cannot have d = mod 4 since d is squarefree. We conclude 
that 




(1, ^/d) = {m + n\/d : m,n G Z}, d = 2,3 mod 4, 
(1, iib^) = {m + n^ : m,n G Z}, d = 1 mod 4. 



e.g. In Q{i) wc have | + |i G and 1 + 5i G Or- In Q(v^) we 
have I — G i^, — | + G O/^. (The latter has minimal polynomial 
x"^ + X + 1). 

We now require a little about modules. 

Definition 3.4. Let R be an integral domain. An R-module M is an abelian 
group (which we shall write additively) with a map RxM ^ M , (r, m) i->- rm 
such that 

(ri + r2)m — rim + r2m, (rir2)m = ri(r2m) 
r(mi + m2) = rmi + rm2, Im = m 
/or a// r, ri, r2 & R and m, mi, m2 G M. 



7 



Example 3.5 

1. Let i? be a field and M a vector space over R. Then M is an i?-module. 

2. If = Z and M is any additive abelian group tlien M is an i?-module. 



We say that M is finitely generated if there exist mi, . . . , mjt e M such 
that 

M = {rimi H h mjtrfe : ri, . . . , e R}. 

Lemma 3.6. a E K is an algebraic integer if and only if there exists a 
nonzero finitely generated Z-module M C K such that aM C M. 

Proof. Suppose a e Ok, say a'^ + a^-io;'^^^ + • • • + Oq = 0, with G Z. Let 
M = Z[a] = {/(a) : /(x) e Z[a;]} C K. Then M = (1, a, . . . , a'^"^) and 
aM C M, since = = - ^JjJ a^a^ G M. 

Conversely, suppose M C K is a nonzero finitely generated Z-module 
such that aM C M. Take Wi, ... ,Ws to he a, generating set for M. Let 



^^CijWj, Cij G Z. 



Putting C = (cij) we see that 

{al - C) 



\Ws J 



/0\ 





so that a satisfies det(a;/ — C) = 0, a monic polynomial with integer coeffi- 
cients. Hence a G Ok- □ 

Theorem 3.7. Let K he an algebraic number field. If a, P G Ok then 

a + I3,a(3 e Ok- 

Hence Ok is a ring, called the ring of integers of K. 

Proof. Suppose a, /3 G Ok- Let M, C A' be finitely generated Z- modules, 
generated respectively by {vi, . . . , Vd} and {wi, . . . , We}, such that aM C M 
and /3iV C N. Consider 

k 

MN := {^miUi : M,nie N}. 



Then MN is finitely generatedy (by {viWj : 1 ^ i ^ d, 1 ^ j ^ e}) and in 
K. Moreover, 

(a + P)MN C iQM)N + M(/3iV) C MN 

{aP)MN C {aM){/3N) C MN. 
It follows from Lemma 3.6 that a + /3,a/3 e Ok- □ 

Corollary 3.8. //o; e ^/len Tr^/Q(Q;), Norm;^/Q(Q;) e Z. 

Proof. Assume that a G O^-. Then all the i^'/Q-conjugates ai, . . . , q;„ belong 
to Ol (where L is the splitting field of the polynomial ma{x){= mai{x))). 

Thus Tr^/Q(Q;) — ai-\ h G Ol and Norm^/Q(Q;) = cti . . . G Cl, by 

Theorem 3.7. However Tr^/Q(Q;), Norm^/Q(Q;) e Q, and Q n = Z. □ 

Definition 3.9. a e O^- Z5 a unit if and only if e Ok- 

Proposition 3.10. a e Ok is a unit if and only if Norm j^^Q^a) = ±1. 

Proof. Suppose a is a unit. Then 

Norm^/Q(a)Norm;^/Q(a^^) = Norm;^/Q(aa"^) = Norm;^/Q(l) = 1. 

However Norm;^/Q(«) and Norm^/Q(Q;^"'^) are in Z, so both are ±1. 

Conversely, suppose that Norm^yQ(a) = ±1. Let ai, . . . , q;„ be the K/Q- 
conjugates, with a — cti, say. Then ai . . .an = ±1, so that a{a2 ■ ■ ■ «„) = 
±1. Hence — ±(q;2 . . which by Theorem 3.7 lies in Ol- However 
we know that lies in K, and so e Ol f] K — Ok- □ 

Definition 3.11. We say that wi, . . . ,Wn & Ok is an integral basis for Ok 
if Ok = CjWj : Cj e Z}. 

It can easily be shown that the above definition is equivalent to saying 
that Wi,. . . ,Wn is a Z-basis for Ok- We shall show that every Ok has an 
integral basis. The set {wi, . . . , Wn} is sometimes called an integral basis for 
Ok, and sometimes just an integral basis for K. 

Example 3.12 K = Q(v^), d squarefree integer; [K : Q] ^ 2; Ok has 
integral basis 

{l,Vd.}, (i = 2, 3 mod 4, 
{1,^}, ci=lmod4. 
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Note 3.13 Let v = {vi, .... and w = {wi, . . . , Wn} be any two Q-bases 
of K. Let M = {vi, . . . ,Vn)i, and N = {wi, . . . ,Wn)zi Z-submodules of 
K. Suppose C Ok, then /\{vf,^{wf e Z. (Recall that A{v)^ = 
det{TTK/Q{viVj)).) Suppose N C M. Then there exist Cij e Z such that 
Wi — Yl^=i ^ij'^j- Let C — (cij). Then by Theorem 1.8 we have 

I det(C)| = [M ■.N] = i^M/N = m, say, 

as additive groups. So by Lemma 2.4 we have 

AH' = {det{C))^A{vy = m^A{vf. 

liM^N then det(C) = ±1 by Lemma 1.7, and A{w)'^ = A(v)^ 
This allows us to make the following definition. 

Definition 3.14. Let M be any subset of Ok which has a Z-basis. Define 
A{MY := A{wy for any Z-basis w of M. 

Note that if iV C M then A{Nf = w?A{Mf, and so in particular 
A(M)2|A(iV)2. 

Theorem 3.15 (Integral Basis Theorem). The ring Ok has an integral basis 
(that is, a Z-basis). 

Proof. Let v = {vi, . . . ,Vn} be any Q-basis for K. Multiplying each Vi 
by a sufficiently large integer, we may suppose that v C Ok- Let M = 
{vi, . . . ,Vn)^. Then A(M)^ 7^ (and e Z) since {^i, . . . ,Vn} are Q-linearly 
independent. Choose the basis v such that |A(M)^| is minimal. 

Claim: M — Ok, so that {vi, . . . , Vn} is an integral basis. 

Proof of claim: Suppose there exists a e Ok such that a ^ M. Certainly 
a = X]j=i ^j'^j with Cj G Q. Then for any j and any m E Z we have 
a + mvj G Ok but a + mvj ^ M. Hence by adding suitable Z-multiples of 
the Vj to a we may assume that \cj\ ^ 1/2. Moreover, since a ^ M there 
exists j such that cj ^ 0. Choose such a j. 
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Let w be a new Q-basis for K obtained from v by replacing Vj by a. Then 
w C Ok- The change of basis matrix 



C 



( 1 





Cl 




1 



\ 




C2 



V 



1 / 



has determinant Cj. Hence 



by Note 3.13, contradicting the minimality of |A(i>)^| 
exist, and M — Ok- 



So such a does not 

□ 



We can therefore define A(C;^)^, as in Definition 3.14, to be A(w)^, 
where w is any integral basis of Ok'-, we also define A(ii')^ to be the same as 
^{Ok?- 

The following proposition will be helpful for finding an integral basis 
for Ok- 

Proposition 3.16. Let w = {wi, . . . be any Q-basis for K such that 
w C Ok- Let M = {wi, . . . ,Wn)'^ and let M ^ Ok- Then there exist p 
prime with p^|A(M)^ and Ci,...,c„ e not all divisible by p, such that 

\iciWi + . . . + CnWn) G Ok- 

Proof. Let m = [Ok M] > 1, so that |A(M)2| = m'^\A{OKy\- Since 
m > 1, there is a prime p dividing m, so that A(M)^. Since m — ^Ok/M 
we conclude (by a theorem of Cauchy on finite groups) that Ok/M has an 
element of order p. Let a + M be such an element. Then a = XI ^^j'^j with 
dj G Q. Moreover pa E M so that all pdj £ Z. Hence Q; = ^ Ylj ^j'^j with 
Cj G Z not all being mutiples of p. □ 

We now describe how to go about finding an integral basis for Oki where 
[K:Q]= n. 

1. Let w = {wi, . . . , Wn} be any Q-basis for K such that w C Ok- Cal- 
culate A{wf. Let M = {wi, Wn)z- We know M C Ok- 
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If [Ok : M] = m, then |A(M)2| = w?\A{OKf\. li A{Mf is squarefree 
then m = 1 and Ok = M. Otherwise (and if Ok 7^ M), by Proposi- 
tion 3.16, there exist p prime with p^|A(M)^ and Ci, . . . ,c„ € Z, not 
all divisible by p, such that -(ciWi + . . . + c^w^) G O/f. 



3. Hence if A(M)^ is not squarefree than for each prime p such that 
j9^|A(M)^, we look for a G Ok of the form = ^ c^-Wj with Cj G Z, 
not all divisible by p. Suppose that p does not divide Cj for j = k. 
Multiplying through by r G Z such that rck = 1 mod p, we may assume 
that Cfc = 1 mod p. Subtracting integer multiples of the Wi we may 
assume that ^ q < p for all i, and so = 1. Replacing by our 
new a we get another basis, spanning a Z- module M', say. The change 
of basis matrix is 



/ 1 





1 








Ci/p 






Cn/P 



\ 



\ ... 1 

and so A(M')2 = ^A(M)2. 

4. Repeat the whole process with M' instead of M. If a does not exist 
(there are only finitely many possibilities to check, since we only need 
to check each q in the range ^ q < p) then p cannot divide m. 
Eventually we reach a basis for which none of the available primes 
divide m, so that m = 1 and we have arrived at an integral basis. 



Example 3.17 K = 

Then {1, Vd} C Ok and 



, d squarefree. Start with Q-basis {l,\/d}. 



A({l,Vrf})^ 



1 -Vd 



Ad. 



1 

Since d is squarefree the only prime p such that p^|A({l, \fd}Y is p = 2. 
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• Case 1: d = 1 mod 4. We find ^(1 + Vd) G Ok (This element has 
minimal polynomial x'^ — x + {1 — d)/4 & Z[x]). In this case we find 

A{{i,l{i +Vd)}r = ^^4d=d. 

• Case 2: d^l mod 4. Then l{l + Vd) ^ Ok since x"^ - x + ^ ^ Z[x]. 
The only other cases to check are ^, ^\/d, which are not in Ok- Since 
we did not find any "a" , we conclude that 2 does not divide the index 
m — [Ok '■ (1, Vd)i]. Hence {1, Vd} is an integral basis. 



4 Cyclotomic fields 

None of the proofs in this section are examinable! 

Let p > 2 be a prime and (p ■= e^^'^^, so that = 1. Let K = Q(Cp), a 
cyclotomic field. Clearly C •= Cp satisfies 

f(x) = = xP-^ + xP-^ + --- + X + 1. 

X — 1 

Lemma 4.1. f{x) is irreducible in Q[x]. 

Proof. Let g{x) = f{x + 1). It suffices to show g{x) is irreducible. But 

[x + 1) -1 

Since p divides all the coefficients apart from the first, but does not divide 
the final coefficient p, the polynomial g{x) is irreducible over Z by Eisenstein's 
criterion and so over Q by Gauss' Lemma. □ 

Corollary 4.2. [iT : Q] = p - 1. 

So a regular p-gon can be constructed with a ruler and compass only if 
p — 1 is a power of 2. 

The roots of x^''^ + xP'^ + . . . x + 1 are C, C^ ■ ■ ■ , These are the 

conjugates of (, and so f{x) — Yl^Ziix — C)- 
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Note 4.3 



1. Norm^/Q(l - C) = nf=i (1 - C) = /(I) = P 



2. Normj^/Q(l — C) = Normj^/Q(^ — 1) since p — 1 is even. Thus C ~ 1 has 
minimal polynomial g{x) = f{x + 1). 

[this last statement uses: f{x+l) = Norm;^/Q(a;+l— = Norm^yQ(a;— 
(C — 1)) = minimal polynomial of C — 1.] 

Lemma 4.4. // w = {1, C, ■ ■ ■ , C"^} i/ien A(w)2 = (-1)(p-i)/V"^- 
Proof. Prom Question 6 on Problem Sheet 1 we see that 

A(l, C, . . . , C^-^)^ = (-l)(^-^)(^-^)/^Norm^/Q(/'(C)). 

Here K = Q(C) and 

Since p is odd the first factor reduces to (— 1)^^"^^/^. Now 

. _ {x - l)pxP-^ - {xP - 1) 

[X — ly 

and so 

no = 

Hence from Note 4.3 above, 

Norm^/o(-p)Nornw/o(C)^"^ f-p)P-^F-^ 



as required. □ 

Theorem 4.5. The set ■ ■ ■ , C^~^} an integral basis for Ok- 

Proof. Let 9 = C — 1. Certainly we have Z[9] — Z[C]. We shall show that 
{1,9, ... , 9P~^} is an integral basis. 

By Lemma 4.4 and Note 3.13 we see that 

A{Z[9]f = A(Z[C])' = {-lyP-^^/y-^. 



14 



Hence p is the only prime whose square divides A(Z[6'])^. It follows that p is 
the only prime which may divide [Ok : If Ok 7^ ^[0] then there exists 

a e Ok such that 

1 

^ i=o 

with Cj G Z not all divisible by p. Let r be minimal such that p does not 
divide c,.. We may assume Cj = for j < r by subtracting integer multiples 
of the basis elements. Now aO^'"^"^' G Ok-, since a and 6* are in Ok- Write 

^p-^-'-q; = ^(c,^*'-2 + c,+i^f-^ + • • • + Cp_2^'^-^-''). (4.1) 

Then 

^f-i = _ P(P-^) gp-3 p 

and so p'^O'^"^ G C/^. Hence by subtracting multiples of this from both sides 
of (4.1) we see that p'^CrO^^"^ G Ok- However 



p J \p J p 



since Norm;^/Q(^) = p and Norm^/Q {cr/p) = {cr/py~^- This, finally, con- 
tradicts the fact that Norm^/Q(Qi) G Z for all a G Ok, since p does not 
divide Cr- □ 



5 Unique Factorisation Domains 

5.1 Revision from Part A Algebra 

Let R be an integral domain. 
Definition 5.1. 

1. a E R is a unit if and only if there exists /3 G i? such that a(5 = 1. The 
units in R form, a group under multiplication; the group of units. 

2. a,f3 G R are associates if and only if there exists a unit u G R such 
that a = (3u. 
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3. A nonzero, non-unit element a & R is irreducible if (a — (3^ ^ (3 or 
^ is a unit). We write j3\a if there exists 7 e i? such that a — (3^. 

4- A nonzero, non-unit element a & R is prime if (a\p^ =^ a\f3 or al'y). 

A prime element in R is irreducible (Problem Sheet 2). 

Definition 5.2. Let R be an integral domain. R is a Euclidean domain (ED) 
if and only if there exists a function (a Euclidean function) d : -R\{0} — >■ 
N U {0} such that 

1. For all a,b & R with b ^ 0, there exist q,r & R such that a — qb -\- r 
and either r — or d{r) < d{b). 

2. For all nonzero a,b & R, d{a) ^ d{ab). 

Definition 5.3. R is a principal ideal domain (PID) if and only if every 
ideal is principal ( recall that I is an ideal if it is an additive subgroup of R 
and \/r & R,a & I, ra & I; furthermore I is principal if it is of the form 
(7) = {r7 : r e R}). 

Definition 5.4. R is a unique factorisation domain (UFD) if and only if for 
all nonzero and non-unit a & R there exist irreducible f3i, . . . , £ R such 
that 

1. a = /3i.../3n 

2. If a = 7i . . . 7m with irreducible ji, then m = n and there exists a 
permutation a . . . ,n} such that (3i and jaii) are associates. 

In Part A algebra you proved: 

a ED =^ i? a PID ^ i? a UFD. 

In an integral domain R in which factorisation into irreducibles is possible 
then this factorisation is unique if and only if all irreducible elements are 
prime (Problem Sheet 2). 



16 



5.2 Some applications of unique factorisation 

First, a useful lemma: 

Lemma 5.5. Let Ok he the ring of integers in a number field K, and a, P & 
Ok. Then 

1. a is a unit (in Ok) if and only if Norm j^^Q^a) = ±1. 

2. If a and (5 are associates (in Ok) then Norm^/Q(Q;) = ±Norm;^yQ(^). 

3. If Norm K/Q{a) is a rational prime, i.e. a prime number in Z, then a 
is irreducible in Ok- 

Proof. 1. Proposition 3.10. 

2. We have a = u/3 with u a unit, and so: 

Norm;^/Q(Q;) = Norm^/Q(M)Norm;^/Q(/3) = ±Normj^/q{/3) , by part 1. 

3. Let a — ^5. Then Norm^/Q(Q;) = p = NormK/Q{'y)NormK/Q{S) for 
some prime p e Z. The result now follows from 1. 

□ 

The converses of 2 and 3 are false (see later the proof of Proposition 5.8). 

Application (1). Take K = Q{i), so that Ok = This is a UFD (the 
"Gaussian Integers") — see Problem Sheet 2. We have Norm^/Q(a + bi) — 
+ 6^, so that the only units are ±1, ±i, by Proposition 3.10. 



Theorem 5.6 (Fermat/Euler). If p is a prime, and p = 1 mod A, then there 
exist a,b & Z such that p = + 6^, and this decomposition is unique, [here 
'unique' means: up to ± and up to swapping a and b.] 

Proof. Assume p = 1 mod 4. Then — 1; so there exists r e Z such 

that p\l + (e.g. r = g'^P^^')/'^ mod p where g is a primitive root modulo 
p). In Z[i], we have p\{l + ri){l — ri). If p is irreducible in the UFD Z[i], 
then p|(l + ri) or p|(l — ri), because any irreducible is prime. However p 
cannot divide 1 + ri, for example, because p + pi ^ ^k- Hence there exist 
(a + bi), (c + di) e Z[i], neither units, such that p—{a-\- bi){c + di). Taking 
norms 

p^ = (a' + b'){c' + d'). 
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Now Z is a UFD and neither a+bi ot c+di has norm ±1, giving p — a^ + b^ — 
(a + bi){a — bi). This yields the existence part of the theorem. 
If a + 6i = Q!/3 in Z[i] then, taking norms, we find that 

p — Norm(Q;)Norm(/3). 

Thus q; or ^ must be a unit. Hence a + hi is irreducible in Z[i], and similarly 
for a — bi. Thus p — {a -\- bi){a — bi) is the unique factorisation of p into 
irreducibles. 

If also p = + p = {e + fi){e — fi), then e + fi is an associate of either 
a + bi or a — bi, so that e + fi is one of a + bi, — (a + bi),i{a + bi), —i{a + bi), 
or a — bi, —{a — bi),i{a — bi), —i{a — bi). It follows that {a^, 6^} = {e^, p}, 
which proves uniqueness. □ 

Application (2). Take K = Q(v^) so that Ok = This is a 

UFD (Problem Sheet 2). We have Norm^/Q(a + by/^) = + 26^ so that 
the only units are ±1. 

Theorem 5.7 (Fermat/Euler). The only integer solutions of -\-2 — are 
X = 3,y = ±5. 

Proof. If y were even then x would be even, giving 8|y^+2, which is impossible 
since 4|i/^. So y is odd. 

We have {y + \/^){y — \/—2) = x^'. Suppose there is an irreducible 
element a which divides both y + \f—2 and y — -\/— 2. Then a divides the 
difference 2a/— 2 = —(a/— 2)^. However -\/— 2 is irreducible since its norm is 
2, which is prime in Z. So we must have a — ±-\/^. Now 

a contradiction, since y is odd. Hence y + -\/— 2 and y — -\/— 2 have no 
irreducible factor in common. Unique factorisation therefore implies that 
y + 2 and y — \J —1 are associates of cubes. Since the only units are ±1, 
which are both cubes, we deduce that y ± are both cubes. 
We now have 

y + = (a + b^^^f 
= + 3a^&v^ + 3a62(-2) + 6=^(-2)^^ = (a^ - ^ab^) + (3a^6 - 26^)\/^, 
and hence fe(3a^ — 26^) = 1. Thus b — ±1, a = ±1, and so 

y — — 6ab^ = a{a^ — 6b^) = ±5 and x = 3. 

□ 
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More theorems of Fermat 

1. If prime p = 1 or 3 mod 8 then p = a;^ + 2y^ uniquely (Problem Sheet 
2). 

2. If prime p = 1 mod 3 then p — x"^ + 3y^. 

Proposition 5.8. For K ^ Q(^^) the ring Ok = Z[^^] is not a UFD. 

Proof. We have the factorisation 6 = 2.3 = (1 — v^^)(l + a/^) in Ok- We 
claim that the elements in5' = {2,3,l + \/— 5, 1 — i/— 5} are irreducible in 
Ok- Now 

Norm^/Q(a + by/^) = + 56^ 

so the norms of the elements in S are 4, 9, 6, 6, respectively. For a E S,iia — 
(3^ with non-units (3,^f G Ok, then Norm(/3), Norm(7) = ±2, ±3. However 
there are no elements in Ok with norm ±2, ±3, since a? + 56^ = ±2, ±3 has 
no solutions in integers a, b. This proves the claim. 

By Lemma 5.5 Part 2, the elements 2, 3 cannot be associates of 1 + -\/— 5, 
1 — -\/^. So we have two distinct factorisations into irreducibles. □ 

6 Unique Factorisation of Ideals 

To recover unique factorisation we will use ideals instead of elements. Recall 
that an ideal J of a commutative ring i? is a non-empty subset for which 
a ± 6 e / whenever a,b E I, and for which ra E I whenever r E R and a E I. 

6.1 Statement of the Unique Factorisation Theorem 

Definition 6.1. Let R be an integral domain, and let I, J be ideals of R. 
Then IJ := jl^^Li cah : ai E I ,bi E J, k ^ 1^. 

Observe that IJ consists of finite sums of arbitrary length k. We write 

(a) := {ra : r E R} 

for the principal ideal generated by a. 
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Note 6.2 It is easy to check that: 

1. IJ is an ideal of i?, 

2. If / = {a) and J = then IJ = {a^). 

3. If 7 = {a) then IJ ^ {a)J ^ {aj : j e J}. 



Definition 6.3. Let R be an integral domain. An ideal I of R is prime if it 
is proper and (ah & I ^ a & I or b & I), (recall: an ideal I < R is proper if 
I^R). 

Comment. We shall prove later (Theorem 6.26) that any nonzero proper 
ideal A of Ok can be written as a product of prime ideals A — P1P2. . . Pr 
and this factorisation is unique up to the order of the factors. 

Definition 6.4. Let K,L be fields with K C L. Let I be an ideal of Ox- 
Then I -Ol is defined to he the ideal of Ol generated by products of the form 
ii, such that i & I,i E Ol (sometimes called the image of I in Ol). Note 
that, for any ideals I, J of Ok, any n G N and any principal ideal (a) = oOk 
of Ok, {IJ)-Ol = {I-Ol){J-Ol), r'-OL = {I-OlT (^nd {a)-OL = aOL, 
the principal ideal of Ol generated by the same element (Problem Sheet 3). 



6.2 Finiteness of the class number 

Definition 6.5. If I., J are nonzero ideals of Ok, we write I ^ J (and say 
that I is equivalent to J) if there exist a, (3 E Ok\{0} such that I (a) = J{(3). 

Lemma 6.6. The relation ~ is an equivalence relation on the set of nonzero 
ideals of Ok- 

Proof. Problem Sheet 3. □ 

Definition 6.7. Equivalence classes in Ok under ~ are called ideal classes. 
Let Ck denote the set of ideal classes. The cardinality Hk — \Ck\ is the class 
number of K. 

We shall prove shortly that Hk < 00. 

Proposition 6.8. We have Hk = ^ if and only if Ok is a PID. 
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Proof. (^): Suppose Ok is a PID. Then for any nonzero / C Ok, there 
exists a G Ok such that / = (a). Then J(l) = so / ~ 0;^. 

(=^): Suppose /i/^ = 1. Then for all / < O/^ there exist a, (3 G Ok such 
that 

= (6.1) 

Now the right hand side is just Since /3 e from Note 6.2 (3), we see 
that /3 — ia for some i e I. Hence /3/a E I C Ok- We claim I — {/3/a). 
Certainly {(3 /a) C I. Also, a & I aa G /(a) = so aa = r/3, for 

some r G O^r, giving: a — r^/a, and so a G (a/P); hence / C {/3/a). □ 

Lemma 6.9. Let / C Ok be a nonzero ideal. Then / n Z 7^ {0}. 

Proof. Choose any nonzero a & I. Suppose that a"^ + ad-ia'^~^ -\ hoo = 

(all Qi G Z) with ao ^ 0. Then oq = -a{ai H h a'^'^) G / n Z. □ 

Lemma 6.10. Let I C &e a nonzero ideal. Then Ok /I is a finite ring. 

Proof. Choose any nonzero a G / fl Z. Then Ok ^ I ^ (a). The map from 
Ok/ {a) to Ok/ I which takes a + (a) to a + / is well-defined and onto. It 
therefore suffices to show that Ok /{a) is finite. Let w — {wi, . . . , Wn} be an 
integral basis for Ok- Then Ok /{a) is isomorphic as an additive group to 
©ti(Z/(a))«;i ^ (Z/(a))", where n -.^ [K : Q]. So ^OK/{a) = a" < 00. □ 

Definition 6.11. The norm of I is defined as N{I) :— ^Ok/I- 

Proposition 6.12. Let a : K ^ K he an automorphism. Then I — 
(cKi, . . . , an) and I'^ — {af, . . . , a^) have the same norm. [So, for example, 
in e»Q(^) = Z[V7], N{{3, 1 + V7)) = 7V((3, 1 - ^7)).] 

Proof Problem Sheet 4. □ 

Proposition 6.13. /// = (a) then N{I) = |Norm^/Q(a)|. 

Proof. Let w = {wi, . . . ,Wn} be an integral basis for Ok- Then aw := 
{awi, . . . ,aWn} will be a Z-basis for I = (a). Directly from the definition 

one sees that A{aw) = (j/Yi^^ ai{a)^ A{w) = Norm;^/Q(a)A(w). However 

/ is an additive subgroup of Ok with index N{I), by Definition 6.11. Thus 
if aWi is expressed in terms of w as aWi = '^CijWj, with G Z, then we 
will have N(I) — |det(cy)|, by Theorem 1.8. On the other hand, we have 
A{aw) = dct(cij)A(w), by Lemma 2.4. Hence N{I) = \A{aw) / A{w)\ = 
|Norm;^/Q(Q;)|. □ 
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Lemma 6.14 (Hurwitz). Let K be a number field with [K : Q] = n. Then 

there exists a positive integer M , depending only on the choice of integral 
basis for Ok, such that for any ■y & K, there exist w e Ok and 1 ^t ^ M, 
t G Z with 



|Norm;^/Q(t7 



w] 



< 1. 



Remark. If one could take M = 1 then for any 7 e there would be a 
w e Ok with |Norm^yQ(7 — w)\ < 1. This is equivalent to the Euclidean 
property for the norm function. That is to say, if one can take M — 1 then 



Ok is a Euclidean Domain with Euclidean function d{a) — |Normy^YQ(a)|. 

In general one can regard Hurwitz's lemma as providing a statement 
weaker than the Euclidean property, but valid for any number field. 

Proof. Let {wi, . . . , Wn} be an integral basis for Ok- For any j E K we write 
7 = Y17=i'yi'^i with 7j G Q. Let 7j = flj + with G Z and ^ 6.j < L 
We define (for the duration of this proof only) [7] = ^"^^ aiWi and {7} = 
J2^=i biWi. Hence we will have 7 = [7] + {7} and [7] G Ok for all 7 G 



Let wl^\ . . . , w^"'' be the K/Q-conjugates of Wi, and set 



in) 



j=i i=i 

Then if 7 = Yh^i 'jiWi and jj, := maxi^j^„ |7i|, we have 



|Norm^/Q(7)| 



HE 



EE 

j=i \i=i 



fi \w. 



Cfx'\ (6.2) 



so that M 



Choose m to be the first integer after C^^" and let M = rn' 
depends only on our choice of . . . , ty„. Define a linear map ^ : X — > 

by 

^^^^ = (71 , • • • , 7n) • (6.3) 

Now ^({7}) lies in the unit cube 

B:={{x^,...,Xn)&mr -.Q^XiKl}. 

Partition B into m" subcubes of side 1/m, and consider the points (;/>({/c7}), 
for ^ A; ^ m". There are + 1 such points and only m"' available 
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subcubes. Hence, by the "Pigeon-hole principle" , there are two points lying 

in the same subcube. Suppose these correspond to k = h and /, with h > I. 
Letting t = h — I, we have 1 ^ t ^ m" = M. It follows that t'j = w + S 
where w := [hj] — [Ij] G Ok and 6 := {hj} — {Ij} with 

0(5) e [-1/m, 1/m]". 

By (6.2) and (6.3), we now find that 

|Norm^/Q((5)| ^C(l/m)"<l, 

since we took m > C^/". The lemma then follows, since 5 = t'y — w. □ 

Theorem 6.15. The class number hx — 4I^Ck is finite. 

Proof. Let / be a nonzero ideal of Ok- Choose ^ /3 e I such that |Norm(/3) | 
is minimal, and let M be as in Hurwitz's lemma. Now consider an arbitrary 
a E I, and apply the lemma with 7 := a/f3. Then there exists an integer t 
in the range 1 ^ t ^ M such that |Norm(t(Q;//3) — w)\ < 1 with w e Ok- 
Thus ta — /3w e / and |Norm(iQ; — (3w)\ < |Norm(/5)|. This contradicts 
the minimality of |Norm(^)| unless ta — w/3 — 0. We therefore deduce that 
ta E {(3). In general the integer t will be different for different values of 
a, but we can always deduce that M\a e (/3). Since a was arbitrary we 
conclude that 

(M!)/ C (/3). (6.4) 

Let 

J := {l/i3 X M\xa : ae I}- 

Then J is an ideal; the only non-trivial part is checking that J C Ok, but 
this follows from (6.4). Moreover (/3) J = (M!)/, so that 7 ~ J. 

By taking a = ^ in the definition of J we see that Ok ^ J ^ (-^0- By 
Lemma 6.10 we know that Ok/{M\) is finite, and so there are only finitely 
many possibilities for J. Hence / is equivalent to one of finitely many ideals. 
It follows that there are finitely many equivalence classes. □ 

6.3 Ideal classes form a group under multiplication 

Lemma 6.16. If I, J Q Ok are ideals, with I nonzero, and JI = I then 
J = Ok- 
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Proof. Let {ai, . . . , an} be a Z-basis for /. Since I — JI there exist bij e J 

such that a,j = Yl^=i^ij^j- Hence det(6jj — Sij) = 0, and expanding this 
determinant out, one sees that all terms lie in J, except the product of the 
I's in the identity matrix. Hence 1 G J and so J = (1) = Ok- □ 

Lemma 6.17. If I is a nonzero ideal of Ok, and w & K with wl C then 
w e Ok- 

Proof Take M = 7 in Lemma 3.6. □ 

Lemma 6.18. If I, J are nonzero ideals in Ok, and w e Ok is such that 
{w)I — JI, then (w) — J. 

Proof. Choose an arbitrary /5 e J. Then {w)I ^ {l3)I, so that {l3/w}I C /. 
By Lemma 6.17 we therefore have P/w E Ok, and so /3 e (w). Since /3 was 
arbitrary we deduce that J C (w), giving that ur^J is an ideal in Ok- We 
then have / = {w~^J)I and so by Lemma 6.16, we obtain w~^J = Ok, so 
thatJ=(w). □ 

Proposition 6.19. For any nonzero ideal I C Ok, there exists k such that 
1 ^ k ^ Hk and is principal. 

Proof. Among the Hk + ^ ideals {P : 1 ^ i ^ Hk + 1} some two must be 
equivalent. Suppose that P ~ P with j > i. Then {a)P = {P)P for some 
a,l3 e Ok- Let k = j - i and J = Then {a)P = ll3)Pj C so that 

{a/l3}P C P. By Lemma 6.17 we have a//3 G Ok- Also {a//3)P = JP and 
so, by Lemma 6.18, {a//3) — J. It follows that J — I'' is principal. □ 

Proposition 6.20. The ideal classes form a group Ck- It is called the class 
group of K and its order is the class number Hk- 

Proof. Given two ideal classes [/], [J] we define the product [/] • [J] := [U]- 
This is well-defined (easy). The element [Ok] acts as an identity, and asso- 
ciativity is easily verified. Thus it remains to show the existence of inverses. 
Let [I] be the class of /, and [Ok] = [(1)] the identity. However, given 
[/] e Ck, if l'' is principal, then [/^~^] is an inverse of [/]. □ 

6.4 Proof of the unique factorisation theorem 

Lemma 6.21 (Cancellation Lemma). Let A,B,C C Ok be nonzero ideals 
with AB^ AC. ThenB^C. 
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Proof. Let k be such that A'' — (a) is principal. Multiplying by A'^ ^, we 
get {a)B = {a)C, and so S = C. □ 



Definition 6.22. LetA,B C Ok be nonzero ideals. We write B\A if there 
exists an ideal C C Ok such that A — EC. 

Proposition 6.23. Let A,B be nonzero ideals in Ok- Then B D A if and 
only if there exists an ideal C such that A — BC, i.e., B\A. 

So to contain is to divide] 

Proof. Let k ^ 1 he such that B'' = is principal. If B D A then we 
have B'^-^A C 5^ = Let C := {1//3}B''-^A, so that C C Ok is an 
ideal. Then BC = B{1/^}B''-'^A = A. Hence B\A. Conversely, if B\A then 
A — BC, for some C"; furthermore BC C B, since B is an ideal. Hence 
BDA. □ 

Lemma 6.24. Let A,B be nonzero ideals, and P a prime ideal of Ok such 
that P\AB. Then either P\A or P\B. 

Proof. Suppose that P\AB and P does not divide A. We must show that 
P\B. Now P D AB but P ^ A, so there exists a e A with a ^ P. For any 
/3 G -B we will have af3 G P, since P ^ AB. However P is a prime ideal, 
so if a/3 G P one of a or /3 must belong to P. In our case we conclude that 
/3 G P. Hence P D B, so that P|P by Proposition 6.23. □ 

Note 6.25 In general, for any ring, every maximal ideal is prime. In the 
case of rings Ok the converse is true for nonzero ideals. To prove this, note 
that if P is a nonzero prime ideal of Ok then Ok/P is a finite integral 
domain. Any finite integral domain is a field, and hence Ok/P is a field. It 
then follows that P is maximal. 

This following key theorem is due to Dedekind — as is most of the theory 
of ideals in number fields. 

Theorem 6.26. (Unique Factorisation Theorem for ideals of Ok)- Let A 
be any nonzero proper ideal of Ok- Then there exist prime ideals Pi, . . . , P^ 
such that A — Pi ... P^. The factorsiation is unique up to the order of the 
factors; that is, if A — Qi . . . Qg is another prime ideal factorisation then 
s — r and there exists a permutation a such that Qi — Pa{i), 1 ^ i ^ r. 
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Proof. Assume not every ideal A (nonzero and proper) has a prime factori- 
sation. Let A be such an ideal with N{A) minimal. There exists a maximal 
(hence prime) ideal Pi containing A. So Proposition 6.23 shows that there 
is an ideal C with A = PiC. 

If ^ = C then PiC = C and Pi = Ok, by Lemma 6.16. This is clearly 
impossible. Hence A Q C, and by the definition of the norm (Definition 
6.11) we have N{A) = N{C)[C : A] > N{C). Hence, by our minimality 
assumption for A, one can factor C into prime ideals as C = P2 ■ ■ ■ Pr (or 
C = Ok and A = Pi). Therefore A = Pi . . . Pr, a. contradiction. Hence every 
nonzero proper ideal has a prime factorisation. 

Suppose 

A^PlP2...Pr^QlQ2...Qs. 

Now PilQi . . . Qs- Let k be minimal such that Pi\Qi . . . Qk- li k = 1 then 
PilQi- U k > 1 then Pi|(Qi . . . Qk-i)Qk, but Pi does not divide Qi . . . Qk-i- 
Since Pi is prime, we must have PilQfc- We therefore have Pi\Qk (so Pi I) Qk) 
in either case. Since Qk is maximal this implies that Pi = Qk. Without loss 
of generality we take k — 1 and then, by the cancellation lemma 6.21, we 
have P2 . . . Pr — Q2 ■ ■ Qs- We may now repeat the process until every Pj 
has been shown to equal some Qj. □ 

Note that the prime ideals which occur in the factorisation of A are those 
which contain A. 

Note also that if -u G Ok is a unit, then {u) = Ok and so {u)I = I for any 
ideal ICR; that is to say, ideals "absorb" units. Thus "unique factorisation 
of ideals" is simpler to describe than "unique factorisation of elements" . If 
Ok is a PID then the theorem imphes directly that it is a UFD. However, in 
general Ok will not be a PID, that is to say, not all ideals will be principal. 

Note 6.27 

At this point we explain how to multiply ideals in practice. It is a fact, 
which we will not prove here, that every ideal can be written with at most 2 
generators. We shall write {a, /3) for the ideal 

(a, 13) = {aa + I3b : a,b E Ok}- 

Then the product 

n 

(a,/3)(7,5) = {^Hii^i : idi e {a,/3), Ui G (7,5)} 
1 
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clearly contains the four elements a^y, a5, ^7, ^5, giving 

(a7, a5, /S'f, /3S) C (a,/3)(7,5). 

Moreover any term fiiUi in the sum above is of the shape {aa + Pb){'yc+ Sd) e 
(q;7, aS, (3 J, f3S), so that 

n 

1 

Thus we must have 

(q;,/3)(7,5) = (07, a5, ^7, ^5). 

To reduce the 4 generators on the right to at most 2 requires ad hoc 
methods (given only the technology from the present course). As an example 
consider 

(11,3 + (11,3- = (121,33-11^^,33 + 11^^,22). 
All the generators belong to (11), and so 



(121, 33 - liy^, 33 + IIV^, 22) C (11). 

On the other hand 11 is the highest common factor of 121 and 22, over Z, 
so that one can solve 11 = 121m + 22n over Z. It follows that 



(11) C (121, 22) C (121, 33 - IIV^, 33 + 11^^, 22). 
We can therefore conclude that 



(121, 33 - llv"^, 33 + 11\/^, 22) = (11) 

and hence that 



(11, 3 + v^)(ll, 3 - v^) = (11) 
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6.5 Multiplicativity of the Norm 
Definition 6.28. Let A, B be ideals. We define 

A + B :^ {a + b : a e A,b e B}, 

which is clearly an ideal. We say that A, B are coprime if A + B — Ok- 

This will occur if and only if there does not exist a maximal P such that 
PDA and P D B. Thus, A and B are coprime if and only if they have no 
prime ideal factor in common. 

Note also that, if A,B are coprime and A\BC then A\C; furthermore, if 
A, B are coprime and A\I, B\I then AB\I (Problem Sheet 2). 

Lemma 6.29. If A and B are coprime then AB — Af] B. 

Proof. Certainly AB C Af] B, and so ^4 fl B\AB. On the other hand, since 
yl|An-B and B\Ar\B, it follows by coprimality and unique factorisation that 
AB\A n B. These two divisibility relations suffice for the proof. □ 

Lemma 6.30. If nonzero A,B are coprime then N{AB) = N{A)N{B). 

Proof. The Chinese Remainder Theorem gives 

OK/{AnB)^OK/A®OK/B 

when A + B — Ok, (that is to say, when they are coprime). By the previous 
lemma, AnB = AB. The lemma then follows on considering the cardinality 
of the two sides. □ 

Lemma 6.31. IfP is a nonzero prime ideal of Ok andi ^ then #PyP'+^ = 
*Ok/P. 

Proof. We have P*+^ C P\ but by the Cancellation Lemma 6.21, we cannot 
have P' = P*"*"^. Wc may therefore choose vr G P* with tt ^ P*"*"-^. Then 
-P* 5 (tt). Let (tt) = P*P with B not divisible by P. Define a homomorphism 
of additive groups by 

9: Ok ^ PyP'+^ 
a !->■ OTf. 

(So one multiplies a by tt and then reduces modulo P'+^.) We now have 
e{a) ^O^ane P^+^ ^ {an) C P'+^ ^ {a)P'B C P'+^ 
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^ P'+\a)P'B ^ P\B{a) ^ P\{a). 

Hence ker 9 — P. 

It now suffices to sfiow tfiat 9 is surjective. However 

(tt) + P'+^ = P'B + P^+^ = P' 

since B + P = Or- Tlius, given any /3 + P^+i G P^ / P''+^ (so tliat (3 G P*) 
there exist a G and 7 G P*+^ sucli tliat a7r + 7 = /3. We tlien liave 
^^(q;) = /S + P'"*"^, as required. Finally, tlie First Isomorpliism Tlieorem for 
groups gives tfiat: 

Ok/P = Ok/ ker 9 ^ im^ = PyP'+\ 
Taking orders of botli sides gives tfie required result. □ 

Corollary 6.32. If P is a nonzero prime ideal and e ^ 1 then N(P^) = 
N{PY. 

Proof. Considering Ok and Pj as additive groups we liave 

N{P') = 40k/P' = 40k/P ■ #P/P^ 4fP'-'/P' 

= {^Ok/pY = N{py. 

□ 

Corollary 6.33. If A = YliPi > (-^i being distinct nonzero prime ideals), 
then we have N{A) = llN{Piy\ 

Proof. Use the corollary above and Lemma 6.30. □ 

Prom the Unique Factorisation Theorem 6.26 and this last corollary we 
deduce: 

Proposition 6.34. IfA,B are nonzero ideals then N(AB) = N(A)N(B). 

Note that if N{I) = p, a. rational prime, then / is automatically prime. 
The converse is not true, but we shall soon see that every prime ideal P does 
have N{P) — p^ for some rational prime p and integer k. 

Example 6.35 What happens in Recall that 

6 = 2x3 = [1- X [1 + V^]. 
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In terms of ideals we write this as 

(6) = (2)(3) = (1-^)(1 + ^). 

Let Pi = (2, 1 + v^), P2 = (2, 1 - v^), Qi = (3, 1 + V^) and Q2 = 
(3, 1 - where {a, j3) := {ra + s/3 ■.r,s e Ok}- Now 

(2) = (4,6)CPiP2C(2,6) = (2) 

giving P1P2 = (2). Wc have iV((2)) = Norm(2) = 4, and so N{Pi)N{P2) = 4. 
Moreover an easy calculation shows that a = b mod 2 whenever a + by/— 5 G 
Pi, and so P^ ^ Or- We therefore deduce that N{Pi) = N{P2) = 2. Similarly 
(3) = (9,6) C Q,Q2 C (3,6) = (3), so that Q1Q2 = (3), and N{Q,) = 
N{Q2) = 3. It follows that Pi, P2,Qi,Q2 ai'c all prime ideals. (In fact. 
Pi = P2, e.g. 1 - = 2.1 - (1 + v^).l G Pi.) 

We also have Pi, Qi ^ (1 + V~^) and P2, (^2 ^ (1 — \/— 5). Consideration 
of norms then shows that (1 + -\/— 5) = PiQi and (1 — -\/— 5) = P2Q2- Thus 

(2) (3) = (1 + y=5)(l - y=5) becomes P1P2Q1Q2 = P1Q1P2Q2, 

demonstrating that we have the same factorisation into ideals, even though 
the factorisations into irreducibles are different. 



7 Decomposition into prime ideals 

Let X be a number field of degree [K : Q] — n. Let P be a nonzero prime 
ideal of Ok- Then P n Z is a prime ideal of Z, and so is of the form pZ for 
some rational prime p. We therefore have P D pOx — {p)- We say that P 
lies above the prime p. 
Suppose that 

{p)^P^\..Pr 

where Pi, . . . , P^ are distinct prime ideals in Ok- Then Pi, . . . , P^ are the 
prime ideals lying above the rational prime p. Taking norms we have 

= iv(Pi)^i . . . N{Pry^ 

Hence, each N{Pi) = p^^ and ^11=1 ^ifi = ^■ 

Note also that P must be one of the Pi and so N{P) is a power of p. 
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Definition 7.1. The integer is called the ramification index of Pi. If 

Ci > 1 we say that Pi is ramified. // some ei > 1 we say that p ramifies in 
K. The integer fi is called the degree of Pi. 

Note tliat p^^ — a^Ox/Pi and that Ok /Pi is isomorphic to the finite field 
with p^^ elements. 

Theorem 7.2 (Dedekind). Suppose that K — Q(q;) with a e Ok having 
minimal polynomial m{x) G Z[a;] of degree n. If p does not divide [Ok '■ ^[o;]] 
and m{x) := m{x) modp e factorises as 

r 
i=l 

with (ji distinct and irreducible, then 

1. Pi = {p,gi{a)) is a prime ideal of Ok (here gi{x) e Z[a;] is any polyno- 
mial such that gi{x) = gi{x) modp). 

2. The prime ideals Pi are distinct. 

3. The degree of Pi is the degree of gi. 

Proof. Suppose that p does not divide the index [Ok '■ Z[q;]]. Consider the 
natural map Z[q;] — )■ Ok/pOk- An element 7 of the kernel must have the 
form p(3 for (3 G Ok- Since p does not divide the index [Ok '■ ^[«]] we must 
have /3 G Z[a\. The kernel is thus precisely p'Z[a] and we get an injection 
Z[q;]/pZ[ci;] ^ Ok/pOk- Indeed this must be an isomorphism of rings since 
both sides have order p". Now consider the ring homomorphism from Z[x] 
to 'L[a\/p'L[a] taking g[x) to g{a) -\- pl^a]. This has kernel 

{g{x) : g{x) = m{x)h{x) +P3{x)} = (p,to(x)), 

giving 

'L[a]/pZ[a] = Z[x]/{p,m{x)). 

Finally consider the homomorphism from Z[a;] to Fp[a;]/ (m(a;)), sending g[x) 
to g{x) + {ffi{x)). The kernel of this map is 

{g{x) : fh{x)[g{x)} = {g{x) : g{x) — m{x)h{x) +pj{x)} = {p,m{x)). 
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Thus Z[x]/(p, m(a;)) = ¥p[x]/{m{x)), and composing our various maps we 
obtain 

Ok/pOk = ^ Z[x]/(p, m(a;)) ^ Fp[x]/(m(a;)). 

We are looking for prime ideals P with Ok ^ -P ^ There is a 1 — 1 

correspondence between the prime ideals of Ok containing (p) and the prime 
ideals of Ok/pOk, and between these latter prime ideals and the prime ideals 
of ¥p[x]/{fh{x)). However the prime ideals of ¥p[x]/{fh{x)) are generated by 
irreducible factors gi{x) of m{x). Tracing back the effect of our various 
isomorphisms one sees that these correspond to Pi = (p,gi{a)) in Ok- This 
proves parts 1 and 2 of the theorem. Moreover one sees, again by checking 
the effect of our three isomorphisms, that N{Pi) — ^¥p[x]/{gi{x)), which 
proves part 3. 

Finally we have 

r r r r 

1=1 i=l i=l i=l 

However pf* = N{Pi) ^pdegfei) ^i^y p^^j.^ ^-^^^ 

On the other hand, N{{p)) — p^ and so (p) = 111=1 ■ This proves part 4, 
the final assertion of the theorem. □ 

Corollary 7.3. If p ramifies then p\/^{'I\oi]Y . 

Proof. \ip\[OK '■ Z[q;]] then ]9|A(Z[q;])^. So we may suppose that p does not 
divide [Ok '■ 1\a]\. Then the above theorem shows that if p ramifies, with a 
factor P^. then m{x) has a multiple irreducible factor g{x) over Fp, for which 
g{a) e (p, 9'(Qi)) = P. We then have m[x) — g{xyh{x) +pk{x), say, so that 

m'{x) = g{x){2g'{x)h{x) + g{x)h'{x)} + pk'{x) = g{x)j{x) + pl{x), 

say. Thus m'{a) — g{a)j{a) + p/3 with jS e Ok- It follows that 

Norm^/Q(m'(a)) = 11'^'^"^'^")) = Yl(^i9{a)j{a)) +p-f 
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for some algebraic integer 7. We now have 

Norm^/Q(m'(a)) = Norm;^/Q(^(a))Norm;^/Q(j(a)) + P7, 

so that in particular we see that 7 G Z. However, since P\{g{a)) we will 
have A'"(P)|Norm^/q)((7(a)) and hence p|Norm;^/Q(gf(Q;)). We therefore con- 
clude that p|Norm^/Q(m'(Q;)). The result now follows, since A^(Z[a]) = 
±Norm^/Q(m'(Q;)), by Problem Sheet 1. □ 

Example 7.4 Let K = Q(v^), so that Ok = and A(Z[v^])^ = 

4(— 5) = —20. The possible ramified primes are 2 and 5. We have m(a;) — 
+ 5, and 

x'^ + 5 = x'^ + l = {x + lf mod 2 

so that 

(2) = (2,x/=5 + l)^ 
Similarly, x^ + 5 = x^ mod 5 so that 

(5) = (5, = (V=5)l 

For all primes we have 5^1= 1 Ci/? = 2, so r ^ 2. Thus one of the following 
cases holds: r = 1, ei = 2, /i = 1 (ramified case), or r = 1, Ci = 1, /i = 2 
(we say p remains inert), or r = 2, Ci = 62 = 1, /i = /2 = 1 (we say p splits). 
We extend this language to general algebraic number fields, saying that p is 
inert if (p) is prime in Ok, and that p splits otherwise. 
We have already dealt with p = 2, 5 so consider py^ 2,5. 

Case 1: j = — 1. Then -|- 5 is irreducible modulo p, and 

(p) = P:=(p,y=5 2 + 5) = (p) 

is inert. 

Case 2: (^^) = 1. Then 

x'^ + 5 = {x — a){x + a) mod p 

where a ^ —a mod p. In this case (p) = P1P2 where Pi = {p, V— 5 — a) 
and P2 = (p, \/— 5 -|- a), e.g. + 5 = x"^ — 1 = (a; — l)(a; + 1) mod 3, 
so that (3) = (3, -\/^ — 1)(3, + 1). (Note that for case 2 we have 
p = 1, 3, 7, 9 mod 20 by quadratic reciprocity.) 
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8 Minkowski: computation of the class group 



8.1 Minkowski's convex body theorem 

Let {vi, . . . ,Vn} be any basis for R". Let L — {X^iLi ^i'^* • £ ^} be 
the lattice generated by the fj. It is an additive subgroup of M"". Let D = 
{Sr=i : Oj e [0,1)}. We call D a fundamental domain for L. Every 
V can be expressed uniquely as v — u + w with u E L and w E D. 

If Vi — X]j=i '^ij^j where {ei, . . . , e„} is the "standard basis" for R", then 
we define Vol(D) := |dct(ajj)|; this is sometimes denoted Vol(L). Wc also 
have Vol(D)^ = det(f j ■ Vj), being the determinant of matrix (ajj)(ajj)*. One 
can easily check that Vol(D) is independent of the choice of Z-basis for the 
lattice L. 

Lemma 8.1 (Blichfeldt). Let L be a lattice in M", and let S be a bounded, 
measurable subset o/M" such thatYol{S) > Vol(L). Then there exist x, y & S 
with X ^ y and such that x — y & L. 

Proof. (Non-examinable) 

Let be a fundamental domain for L. When a E L write S{a) — {S—a)r\ 
D. Then S is the disjoint union of the sets S{a)+a as a runs over L. It follows 
that Vol(^) = EaeLVol(5(a)). However Yo\{S) > Vo\{D) and S{a) C D. 
Thus some S{b) and S{c) with b c must overlap. Let v G S{b)nS{c). Then 
X = V + b E S and y = v + c E S, and x — y~b — ceL. □ 

Definition 8.2. We say S QW^ is convex if 

x,y E S, ^X^l =^ Xx + {1 - X)y E S. 
We say S is symmetric (about the origin) if 

X E S ^ —x E S. 

Tlieorem 8.3 (Minkowski's Convex Body Theorem). Let L be a lattice in 
M". Let S be a bounded measurable subset o/M" which is convex and sym- 
metric. IfVo\{S) > 2"Vol(L) then there exists v E L - {0} with v E S. 

Proof. (Non-examinable) 

We have Vol(|5) = 2-"Vol(^) > Vol(L). Thus Bhchfeldt's result tells us 
that there exist x,y E such that x — y E L — {0}. Now 2x E S and, by 
symmetry, —2y E S. Using convexity we then find that |(2a; + (— 2y)) E S, 
that is to say, x — y E S. □ 
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Note 8.4 If 5" is closed, and therefore compact, then it is enough to have 
Vol(S') ^ 2"Vol(L). 



Example 8.5 We give another proof that if p = 1 mod 4 then there exist 
a;, y e Z such that p = + y"^. 

We know that = 1; so there is an s such that = — 1 mod p. If 

p — + y'^ then a;^ + = mod p and so {x/yY = —1 mod p. Hence x = 
±sy mod p. We will search for a "small" integer solution to x = sy mod p. 
Such points form a lattice L in R^. We have 

X = sy mod p 4^ x = sy + pz, with z E li 4^ {x,y) = y{s, 1) + z{p, 0). 

Hence {(s, 1), (p, 0}} is a basis for L, and 



Vol(L) 



det 



s p 
1 



p. 



Let C be the disc x^ + y'^ < 2p, with radius \/2p. The set C is clearly convex 
and symmetric about the origin, and 

Vol(C) = 7^{^/2p)^ = 27rp > 2^p = 2^yo\{L). 

Hence by Minkowski's Theorem there exists a nonzero v e L such that 
V & C. Suppose that v — {x,y). Since v & L we have x = sy modp, and 
hence x'^ + y'^ = mod p. However v E C implies x"^ + y"^ < 2p, so that 
x^ + y^ — or p. Finally, since v we must have x^ + y'^ — p. 



8.2 Minkowski's bound 

Let [K : Q] := n = r + 2s where r is the number of real embeddings 
(7i,...,(Tr : K — > R, and s the number of pairs of complex embeddings 

(Tj.+l, ■ ■ ■ , C^+s, O'j.+l, ■ ■ ■ , O'j.+s '■ K C 

Definition 8.6. Let a : K ^ W x C ^ W be defined as a{x) : = 

(c7i(x), . . . , ar{x),^{ar+i{x)), Q{ar+i{x)), . . . , ^{ar+s{x)), Q{ar+s{x))) . 
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Let Ok be the ring of integers of K, and let {vi, . . . ,Vn} be an integral 
basis for Ok- Write A for the matrix whose ith row is (j{vi). By elementary 
column operations we find that 

(-2i)Met(A) = det{aj{vi)) = ^ 

where := ^^{K). Thus det(A) 7^ 0, and a{pK) is a lattice in M" of 
volume 

If / is an ideal of Oki with basis w — {wi, . . . , then wi — Q^'^j 
and 

7V(/) = [C»^:/] = |det(cy)| 

by Theorem 1.8. Moreover, A^(u') = det^(cjj)A^(u) by Lemma 2.4, and 
so A^(i(7) = N{iyA'^{v). We can now replace the basis v in the previous 
calculation by w, to deduce that 

voKad)) = = ^(-^)v^^^ ^ mvm 

2* 2* 2* 

Lemma 8.7. For t > let 

Rt := < (xi, . . . , x^, ^1, . . . , e M"" X : ^\xi\ + 2^\zs\ ^ t \ . 

I i=l 1=1 J 

Then 

1. Rt is a compact, symmetric, and convex subset ofMJ\ 

2. Vol(i?t) = 2T(7r/2)7n! 

Proof. Non-examinable. See Lang, Algebraic Number Theory, (Addison- 
Wesley 1970), page 116. □ 

Theorem 8.8. Let I C Ok be a nonzero ideal. Then there exists a nonzero 
a & I with 

|Norm;^/Q(Q;)| ^ CkN{I) 

where 

s 



is Minkowski's constant for K. 
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Proof. Choose teRso that 7r^r/n! = A'y/\A^{K)\N{I). Then 

yolW = = ^-'V™^(^) = 2»Vol(.(/)). 

By Minkowski's theorem (compact version), there exists a nonzero a E I 
such that a{a) e Rt- Hence 

r r+s 
1=1 «=r+l 

This means that J2^=i ^ ^ 



1 



1=1 



By the inequahty of the arithmetic and geometric means we have 

Ki=l / \i=l / 

giving |Norm;,/Q(a)| ^ (^)" = Ci,iV(/). □ 

Theorem 8.9. Any ideal class c e Ck contains an ideal J such that N{J) ^ 
ck, that is to say 



N{j) ^ (-Y ^vmiqi 



Proof. Let / be any ideal in the inverse class c~^. We now know there 
exists a nonzero a E I such that |Norm^/Q(Q;)| ^ ckN{I). Since (a) C / 
we have I\{<y), and so there exists an ideal J such that IJ = (a). The 
relations / G and IJ = (a) imply that [J] = c and J E c. Moreover 
N{I)N{J) = N{IJ) = |Norm^/Q(a)| ^ ckN{I), and so N{J) ^ ck- □ 

Note 8.10 For a nonzero ideal J C Ok we have N{J) — ^jj^OK/ J so that 
N{J).x e J for any x G Ok, by Lagrange's Theorem, regarding Ok/ J as 
an additive group. Taking x = 1 shows that N[J) G J. It follows that 
J 2 {N{J)), and hence that J\{N{J)). 

We can therefore deduce that every class c contains an ideal J such that 
J has an element m G J fl N with m ^ ck- 
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Corollary 8.11. //X ^ Q then \A'^(K)\>1. 

Proof. Since A^(J) ^ 1 for any ideal J C Ok, we must have 

1 ^ (^Y ^yWm < (-Y ^VWm. 

Let hn ■= (f )" It will suffice to show that 6„ > 1 for all n ^ 2. Now 
62 = 7r^/8 > 1. Moreover 

'l + - =- l + n- + ...^->l. 



6„ 4 \ n J A \ n / 2 
Hence bn > 1 for all n ^ 2. □ 



9 Class group computations and Diophantine 
applications 

Note 9.1 The class group is abelian. Let c be any ideal class. Then 

there exists J E c with N{J) ^ ck- Write J as a product of prime ideals, 
J = Pi . . . Pg, say. By the multiplicativity of the norm, N{Pi) ^ ck for each 
i. Moreover c = [J] = [Pi . . . Pg] = [Pi] ■ ■ ■ [Ps]- Hence c is in the group 
generated by ideal classes of prime ideals of norm at most ck- Thus the class 
group itself is generated by classes of prime ideals in Ok of norm at most 
Ck- 

In order to find a suitable set of generators we observe that prime ideals 
of norm ^ ck are factors of ideals (p) where p G N is prime and p ^ ck- 
Using Dedekind's Theorem 7.2, we can factor all such primes p into prime 
ideals, to give a complete set of generators. 

To determine the class group it remains to find any relations satisfied by 
the classes of these prime ideals. Some such relations can be found from the 
prime factorisations of the ideals (p), since these are principal, and others can 
be obtained by factoring principal ideals {a) generated by elements a e Ok 
of small norm. 

To show that the set of relations found is complete one needs to show that 
appropriate combinations of the generators are not principal. In general this 
can be awkward, but for complex quadratic fields one can prove that an ideal 
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/ is non-principal by finding all elements a e Ok with Norm;^/Q(Q;) = N{I), 
and checking whether or not / = (a). If K is complex quadratic there will 
only be finitely many possible a with Norm^^Q(Q;) = N{I) to check. 



Example 9.2 Let K = Q(\/^), so that Ok = We know from 

Proposition 5.8 that Ok is not a PID, so that /ix > 1- We have n — 2,s — 
l,r = 0, and A^{K) = -20. Thus 

2! /4\ ^ 4\/5 ^ 



22 \7ry TT 

It follows that every ideal class contains an ideal of norm at most 2, and 
that Ck is generated by classes of prime ideals of norm at most 2. However 
(2) = P| where Ps = (2, 1 + v^) with N{P2) = 2. Hence [P2] generates 
Ck- Moreover P| = (2), giving [Pa]^ = [(2)] = [Ok], which is the identity in 
Ck- Hence Ck is cyclic of order 2, and Hk — 2. 

Example 9.3 Next consider K = Q(^/^), for which Ok — 6], with 

n = 2,r = 0,s = 1 and A'^{K) = —24. In this case 

2! /4\ AVQ 

The ideal class group Ck is generated by prime ideals P such that N{P) ^ 
cx, which means that N{P) = 2 or 3. 

Now + 6 = mod 2, and so (2) = P2 where P2 := (2, \/—Q). Similarly 
a;2+6 = mod 3, so that (3) = P| with P3 := (3, ^/^). We have Ar(P2) = 2 
and N{P-i,) = 3. (Indeed e = 2, / = 1 in both cases.) It follows that Ck 
is generated by [P2] and [P3], but we need to see if there are any relations 
satisfied by these classes. 

If P2 is principal then P2 = (x + 6) with x, y G Z. Taking norms 
this gives 2 = |a;^ + Qy^\, which is impossible. Similarly P3 is not principal, 
so that [P2], [P3] ^ [Ok] in Ck- 

Since P| = (2) we have [P2]'^ = [Ok], and similarly [P^]"^ = [Ok]- 

We next observe that — ^/^.3 — 2.^/^ e P2P3- We also have 

NoTmj^yQ{\/ —6) = 6, and we therefore deduce that {\/—Q) = P2Pz- It follows 
that [P2][P3] = [Ok]. Thus [P3] = [Ps]"^ = [P2], and Ck must be cyclic of 
order 2, generated by [P2], and Hk = 2. 
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Example 9.4 Find all integer solutions of the equation + 54 = x^. 

Let ,x, y G Z be a solution. If y is even then = 54 = 2 mod 4, which 
is impossible. If 3||/ then 3|a;, and on setting x = 3xi,y = 3yi we will have 
yf + 6 = 3xf. Hence 3\yi, and on writing yi = 3y2 we obtain 3yl + 2 = 
xf. However 3|/| + 2 = 2 or 5 mod 9 while = 0, 1 or 8 mod 9. This 
contradiction shows that we must have y coprime to 3. 

It follows that hcf(y, 6) = 1, and hence that hcf(,x, 6) = 1. 

We now use the ideal factorisation {y + 3\/—6){y — 3^/—6) = (x)^. We 
proceed to show that the factors on the left are coprime. If a prime ideal P 
divides both factors then 6^/^ — {v + 3-\/— 6} — {y — 3-\/^} G P, and so 
P\{6^/^) = PiPi. (Recall that (\/^) = ^2^3-) Thus P can only be P2 
or P3. However P\{y + 3a/— 6) implies P|(x)^, and on taking norms we find 
that N{P)\x^, which is impossible, since hcf(x,6) = 1. 

It follows that {y + 3\/^) and {y — 3\/^) are coprime as ideals of Ok- 
By unique factorisation of ideals we have 

{y + 3^) = /3 

for some ideal /. Since P is principal we have [I]^ = [Ok], the identity 
in Ck- However we know from above that Hk = 2 (giving [/]^ = [Ok] by 
Lagrange's Theorem), and so we must have [/] = [Ok]- Thus / is principal, 
so that I — (a) for some a G Ok- 

It follows that {y + 3y/^) = (a)^ — (ct^)? giving y + 3^/^^ = uo'^ with 
u a unit. (Recall that if {a) = (/3) then a = ufi for some unit u G Ok-) 

For K = Q(\/— 6) the only units in Ok are m = ±1, and for both of these 
we have u — u^. It follows that 

y + 3^^ = {uaY = {a + bV^}\ 

say. Equating the coefficient of \/—6 on both sides gives 3 = b{3a^ — 66^}, 
and so 1 = b{a^ — 26^}. Hence 6 = — 1 and = 1, giving y = — ISb^a = 
a{a^ — 186^} = ±17. With these y the only possible x is 7, so that the 
complete solution is x — 7, y — ±17. 

Example 9.5 Let K = Q(v^^T63), so that Ok = ^[|(1 + v^^l63)] and 

Ck = -\/l63 ^ 8.13 < 9. 

TT 

Thus the class group Ck is generated by the classes of prime ideals dividing 
(2), (3), (5) and (7), so we proceed to factor (2), (3), (5) and (7) in Ok- 
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The minimal polynomial of |{1 + is — a; + 41. However we 

find that x'^ — x + 41 = + x + 1 mod 2, which is irreducible. Thus (2) is 
inert, so that the only prime ideal above 2 is (2), which is principal. 

For p = 3,5 and 7 it is enough to consider the factorisation of the polyno- 
mial + 163 mod p, since p does not divide the index [Ok '■ 163]] = 2. 

• x^ + 163 = x^ + 1 mod 3, which is irreducible. Hence (3) is inert. 

• a;^ + 163 = a;^ + 3 mod 5, which is irreducible. Hence (5) is inert. 

• x^ + 163 = x^ + 2 mod 7, which is irreducible. Hence (7) is inert. 

Thus the only relevant prime ideals are all principal; hence Ck is trivial 
and hx — 1- It follows that Ok is a UFD. However, it is not a Euclidean 
domain. (For this non-examinable fact see S&T, Theorem 4.18) 

Note: it is known that there are only finitely many imaginary quadratic 
fields K with hx = 1 (the proof of this is hard!). On the other hand it is 
conjectured that Ok is a UFD for infinitely many real quadratic fields. 

Proposition 9.6. The fact that Hk — 1 for K — Q(-\/— 163) implies that 
+ n + 41 is prime for ^ n ^ 39. 

Proof. Suppose n'^ + n + 41 is not prime for some n < 40. Now n'^ + n + 41 < 
41^, and so + n + 41 must have a prime factor q < 41. 
Now 

+ n + 41 = |n + ^ (1 + v^^l63) } + ^ (l - V^^163) | . 

However q clearly does not divide either factor in Ok, and so q cannot be 
prime in Ok- Since we are in a UFD, it follows that q cannot be irreducible. 
Thus q = where Norm;^yQ(Q;) = Norm;^/Q(/3) = q. 
If ^ 

i + V=m 

a = x + y , x,yeZ, 

then ^ ^ 

q = Norm;^/Q(a) = (x+^^ + 163 (^|) . 

Since q is not a square wc have y 7^ 0, and we deduce that q ^ 163/4 > 40, 
which gives a contradiction. □ 
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For similar reasons 

• + n + 17 is prime for ^ n ^ 15 (consider Q(^/— 67)). 

• + n + 11 is prime for ^ n ^ 9 (consider Q{^/—43)). 

• + n + 5 is prime for ^ n ^ 3 (consider Q(-\/— 19)). 

• + n + 3 is prime for ^ n ^ 1 (consider Q(\/— 11)). 

Example 9.7 [Paper B9 2005] Find the structure of the ideal class group 
of Ok for = Q(v/^). 

Since -29 = 3 mod 4 we have Ok = ^[^^29], and A^{K) = -4 x 29 = 
— 116. Moreover n = 2 and s = 1, so that 

^ Vne ^ 6.9 < 7. 

Thus Ck is generated by the classes of prime ideals dividing (2), (3) and (5). 
We need to factor (2), (3), (5) in Ok, using Theorem 7.2. 

• x^ + 29 = {x + If mod 2, so that (2) = P| where Pa := (2, + 1) 
is a prime ideal of norm 2. 

• + 29 = - 1 = (a; + l)(x - 1) mod 3, so that (3) = P3P3 where 
P3 := (3, V— 29 + 1) and P3 := (3, V— 29 — 1) are distinct prime ideals 
of norm 3. 

• x"^ + 29 = x"^ - 1 = {x + l){x - 1) mod 5, so that (5) = P5P5 with 
P5 := (5, + 1) and P^ := (5, a/=29 - 1) being distinct prime 
ideals of norm 5. 

We have [P2Y = [PsliPs] = [^5] [^5] = [Ok]- Hence Ck is generated by 

[^2],[P3],[P5]. 

We proceed to find the orders of these elements, and relations between 
them: 

We have Norm^/Q(a; + y^/—29) = x^ + 29y'^, so there are no elements in 
Ok of norms ±2, ±3, ±5. Thus P2, P3, P5 are not principal, and [P2] must 
have order 2. 

The only clement a G Ok of norm ±9 is ±3. Thus if P3^ = (a) we 
must have P| = (3) — P3P3. However this would imply P3 = P3, giving a 
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contradiction. Thus the order of [P3] is at least 3. Indeed it cannot have 
order 3 since there are no solutions to x"^ + 29y^ = ±27. We shall come back 
to [P3] later. 

Turning to [P5], note that 3^+29x2^ = 125, so that iV((3+2^=29)) = 5^. 
Hence (3 + 2v^=M) must be one of P^, P^P^, P^P^,'^ or Pf . However 2 + 
2yf^ e P5, giving 3 + 2^^ ^ P5. Hence P5 does not divide {3 + 2^/^). 
It follows that (3 + 2v/^29) = Pl^^, and, taking conjugates, we also have 
(3 — 2-\/— 29) = P|. Hence [P5] has order dividing 3. Since P5 is not principal, 
it must have order exactly 3. 

Finally we note that 30 = {1 + a/=29}{1 - ^/^}. Thus 

(2)(3)(5) - (1 + y=29)(l - y=29). 

Now (2) (3) (5) = P^PsP^PbP^. So, in order to have the correct norm, we 
see that (1 ± v^^) must be one of P2P3Pr,- P2P3P5, P2P3P5 or P2P3P5. It 
follows that at least one of these products is principal, and so one or other 
(and hence both) of [P3] and [P3] = [P3]~^ is in the group generated by [P2] 
and [P5]. 

We conclude that Ck is an abehan group generated by an element of 
order 2 and an clement of order 3. Thus it is cyclic of order 6. (In fact 
Norm(2 ± 5^/— 29) = 729 = 3*^, and by the argument above we find that 
(2 + 5^^) = P| and (2 - 5^^) = ^3^-) 

Example 9.8 [Paper B9 2005] Let K = Q{V^)- Given that hx = 2, 
prove there are no integral solutions of the equation — — 37. 

Suppose that x, y e Z are such that + — x^. Then as ideals we have 

We claim that {y + ^/^) and {y - y/^) are coprime ideals. For suppose 
that a prime ideal P divides both. Then y±y/—37 G P, so that the difference 
2\/— 37 e P. Hence P|(2\/— 37), and since P is prime we conclude that P|(2) 
or P\iV=^). 

Since Ok = Z[v^=37], we may factor (p) = (2) and (p) = (37) in Ok 
by using the decomposition of + 37 modulo p. We have X"^ + 37 = 
(X + 1)^ mod 2, giving (2) = P|, where P2 := (2, 1 + v^— 37) is a prime ideal 
of norm 2. Similarly + 37 = mod 37 and hence (37) = (37, = 
P|y, where P37 := (1/— 37) is prime of norm 37. 
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It follows that if P is a common factor of {y + V— 37) and {y — \/— 37) 
then P = P2 or P37. In either case, since P\{y + \/—37), we have P\{x)^ and 
taking norms we get 2\x^ or 37|a;^ respectively. Hence either 2\x or 37|a;, as 
appropriate. 

Suppose firstly that P — P37. Then 37|a;, and since — y'^ + 37 we 
must also have 37|y. Thus 37^ divides x^ — y'^ = 37, which is impossible. 
Alternatively if P = P2, so that 2\x, we will have 8|a;'^. The equation y^+37 = 
x^ then implies that + 1 = mod 4, which is impossible. 

Thus {y + ^y— 37) and {y — ^y—37) are coprime ideals as claimed. However 
their product is {x)^, which is a cube. Hence by unique factorisation of ideals, 
each of the two factors is a cube. In particular, 

{y + V^) = I' 

for some ideal /. Since is principal, the order of [/] in Ck divides 3. 
However hx = 2, so / must be principal. Thus 

{y + = (a + bv^f 

for some a, beZ. Hence y + = u{a + b^T^f for some unit u G Ok- 

However the only units are = ±1, which satisfy u — v?. Hence, on replacing 
a, 6 by —a,—b ii u — —1, we may assume that u — 1. Expanding and 
comparing coefficients we obtain 

y = a{a^ - lUb^}, 1 = b{3a^ - 376^}. 

The second equation implies that 6 = ±1 and 3a^ — 37 = ±1. Hence 3a^ = 38 
or 36, both of which are impossible. 

Hence there are no solutions in integers. 

10 The equation = 

In this section we will establish "Fermat's Last Theorem" for cubes, that 
+ y^ — has no nontrivial {x, y, z all nonzero) solutions in Z. 
We shall work in K — Q{^/^). It is convenient to write 

co = {-l + v/^)/2, 

so that Ok — 'Z^[uj]- We begin by collecting together some basic facts. 
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Lemma 10.1. Let K = Q(\/^) and = (-1 + v^)/2. 

(i) We have = 1. Moreover the set of units of Ok is {±1, icu, io;^}. 
(^M^ The ring Ok is a UFD. 

(Hi) The element A := -\/— 3 is prime, with norm 3. Moreover we have 

Proof (i) To find the unit group we note that 

Norm;^^Q(a + bcu) = — ab + b'^, a,b & Z. 

Thus if Norm;^/Q(a + 6a;) = 1 then (2a — b)^ + = 4, giving solu- 
tions (a, b) = ±(1, 0), ±(0, 1) and ±(1, 1), which produce the six units 
specified in the lemma. 

(ii) See Problem sheet 2. 

(iii) Trivial. 

□ 

Lemma 10.2. If a & Z[a;] and A does not divide a, then = ±1 mod A*^. 

We may use congruences in Z[a;] in precisely the same way as we are used 
to in Z. In particular a = (3 mod 7 means that j\a — (3. 

Proof. Since N{{X)) — 3 the quotient Z[a;]/(A) has 3 elements, which are 
clearly + (A), 1 + (A) and —1 + (A), since these are distinct. It follows that 
a + (A) = ±1 + (A), so that we may write a — ±1 + X/j, for some /i e Z[a;]. 
We now have 

= ±1 + 3/iA ± 3//^A^ + i/X^ = ±1 - i^X^ ^ //^A^ + //^A^ 

so that = ±1 + (/x^ — n)X^ mod A"^. 

However the coset + (A) must be one of + (A), 1 + (A) or —1 + (A), so 
that /i = or ±1 mod A. It follows that fi^ = /i mod A whichever of these 3 
cases holds. This yields A|//^ — // and so = ±1 mod A^ as required. □ 

To prove the non-existence of nontrivial solutions in Zto x^+y^ — z^, it is 
sufficient to prove there are none in 1i[u]; if there were a non-trivial solution 
in Z[uj], we could remove any common factor from x, y and z; indeed any two 
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of the variables would then have to be coprime (since any common factor of 
two of a;,?/, z would also divide the remaining variable). We shall first show 
that at least one variable must be divisible by A and then that we cannot 
have any variable divisible by A, to obtain a contradiction. 

Lemma 10.3. Ij o? + = 7^ with q;,/3,7 G then X divides at least 

one of a, (3 or 7. 

Proof. If A divides none of a, ^, 7 then Lemma 10.2 yields 

= + ^3 _ ^3 ^ ^^^^) ^ _ (^^^^^ = ±3 or ±1 mod A^ 

However A^ = (—3)^ = 9 which does not divide ±3 or ±1. □ 

We shall now, over the next few lemmas, show that cannot have precisely 
one variable divisible by A. 

Lemma 10.4. Let 

with n & N, with /i a unit of Z[a;] and a, /5, 7 e Z[a;] with a, (3 coprime and 
7 not divisible by A. Then n ^ 2. 

Proof. If either of a or /3 is a multiple of A then the equation shows that 
both are, since n ^ 1. However this is impossible, as a and (3 are assumed to 
be coprime. Thus neither of them is divisible by A. Now Lemma 10.2 yields 

;^A^"^^ = a^ + l3^ = (±1) + (±1) = ±2 or mod A^ 

so that Uy^l. □ 

Lemma 10.5. Under the conditions of the previous lemma each of the ele- 
ments a-\- (3, a + ujf3 and a + uj^f3 is divisible by A. Moreover the quotients 

a-\-(3 a-\-uj(3 a + 00"^ (3 

A 

are coprime in pairs. 
Proof. We have 
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so that A must divide at least one of these factors. However A is an associate 
of 1 — a; and 1 — o;^ by Lemma 10.1. Hence 

a + P = a + uj(3 = a + uP'P mod A. 

It follows that all three factors are divisible by A. 

Moreover if 5 divides both a + (5 and a + cu/S then it divides 

(a + - (a + /3) = (a; - l)/3 

and also 

{a + uj^) - uj{a + /3) = (1 - uj)a. 

Hence 5\uj — 1, since a and /9 are coprimc. Similarly if 5 divides both a + fi 
and a + u'^P then 5\oo'^ — 1, while if 5 divides both a + and a + u'^P then 
— It follows in all three cases that 5|A, since a; — 1, a;^ — 1 and uj"^ —uj 
are each associates of A. The second assertion of the lemma then follows. □ 

Theorem 10.6. The equation 

with n e N and /i a unit oj has no solutions (x,(3,j e Z[(x!] with a, (3 
coprime and 7 not divisible by A. 

Proof. We assume we have an admissible solution to 

with the minimal possible value of n. Then 

/xA^V = {a + /3){a + uj(3){a + 00^ 13) 
and the previous two lemmas allow us to write 



X } { A } { A 

with coprime factors on the right, belonging to Z[a;]. Since the factors are 
coprime there is one factor, {a + uj^(3)/X say, which is divisible by A^^"~^). 
Write u — then: 



A3'»-2 11 A 11 A 
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with coprime factors on the right. 

We now use the fact that Z[cj] is a UFD. We have three coprime factors 
whose product is a unit times a cube, and we deduce that each factor must 
be a unit times a cube, say 



^^=mi, -y^ = /^272, 
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with 7 = 717273 (and where /i2,Ai3 have absorbed the extra factors uj^bP'^ 
respectively). We now observe that 

//iA3(-^)7? + m2+/^37l 
= 0, 

since 1 + a; + o;^ = 0. We therefore obtain an equation 

for appropriate units ^' and /i". Moreover 72 and 73 are coprime, since 
[a + uv) I A and [a + iJ^v) / A were coprime; and A does not divide 71 since it 
did not divide 7. 

After Lemma 10.4 we know that n ^ 2, so that n — 1 ^ 1 and 

72 + A*'73 = inod A^. 

From Lemma 10.2 we deduce that /i' = ±1 mod A^. However A^ does not 
divide any of a; ± 1 or ± 1 since these are either imits or associates of A. 
Thus only fi' = ±1 is possible. Hence, finally, we obtain an equation of the 
form 

contradicting the supposed minimality of n. This concludes the proof of the 
theorem. □ 

We are now in a position to prove our desired result. 

Theorem 10.7. The equation + — has no nontrivial (x,y,z all 
nonzero) solutions in Z. 
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Proof. Any such solution must also give a solution in Z[uj]. Remove any 

common factor from x, y, z, which means they must be coprime in pairs 
(since any common factor of two of x, y, z would also divide the remaining 
variable). By Lemma 10.3, at least one of x,y,z must be a multiple of A, 
and indeed only one, since the variables are coprime in pairs. We extract 
the largest possible power of A from this variable. A" say, and use ji — 1 
(and replace some of y, z with — — y, —2;, as needed) to put the equation 
into the form described in Theorem 10.6, which we have shown to have no 
solution. □ 
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